Privacy
How your account, saved creations and model requests are handled.
The short version
- Signing in uses a session cookie. Your verified email connects your balance and saved creations across devices. You can create an account without buying credit.
- We store your briefs and creations for your library. Your library is available to your signed-in account. Anyone who receives a share link can open that clip.
- AI provider retention depends on your model. Models marked as allowing provider retention may use endpoints that keep request data. Other models require a zero data retention route. Code and vector drafting use OpenRouter’s no-training routing filter; direct video generation follows its provider’s policy.
What is stored, and why
The brief you type
Your brief and the context needed to draft your scene are sent through OpenRouter to an AI provider. We store the brief, selected model, generation status, price and usage records to show your history, run the service and handle support or payment disputes.
Your email and account
We store the email address you verify when you sign in, along with account and payment identifiers. It is used for sign-in links, receipts and account support. A receipt address supplied at checkout does not change your sign-in address. We do not use these addresses for a marketing mailing list.
Cookies and browser storage
The cc_session cookie keeps you signed in for up to 90 days. It is protected from access by page scripts and is sent over HTTPS in production. Signing out revokes that session. We store hashes of session and sign-in tokens; emailed sign-in links expire after 15 minutes and work once. Browser storage also remembers interface preferences and comparison progress. When you request a sign-in link or open checkout, browser storage also keeps your unfinished briefs, creation settings and selected credit pack for recovery in this browser. Recovery is available for 30 minutes; the saved copy is removed on return or sign-out. It does not start a purchase or generation automatically. An old customer identifier in browser storage does not authorize account access.
Recorded clips, and the scene behind them
New vector documents, recorded videos, scene code and sequence drafts are stored so you can reopen them from your account. Vector share links can also contain a copy of the animation in the URL fragment. That fragment is not part of the request sent to our server, but it is available to anyone you give the link to. Recorded clips use signed share links. Deleting our stored copy cannot remove downloads or copies of links already held by someone else.
Money records
Credits bought and spent are recorded in an append-only ledger: the amount, the time, the reference, and what it was spent on. These records support billing, refunds and accounting; they are retained separately when a clip is deleted.
Who else is involved
The service uses these providers:
- OpenRouter — receives your brief and returns a drafted scene. It is the model router that reaches the underlying model provider, which also processes the request.
- Stripe — takes the payment, holds your card details, and sends receipts. Card numbers never reach this site.
- Vercel — hosts the site, runs rendering, processes operational logs and provides Web Analytics for site usage.
- Neon — hosts the Postgres database that holds briefs, clips, accounts and the ledger.
- Resend — delivers sign-in emails and processes support email, including the address and message contents.
When you press a buy button your browser navigates to Stripe’s own checkout page, and from that point Stripe’s privacy policy governs what happens on that page.
AI provider retention
The model selector identifies choices that allow provider retention. For those choices, prompts and generated responses may be retained under the serving provider’s policy, including for abuse monitoring. Retention periods vary by provider; we do not promise a single deletion deadline for those routes. For other choices, we require endpoints that OpenRouter lists as zero data retention.
We do not train models on your creations. Code and vector drafting requests use OpenRouter’s no-training filter, which relies on its classification of provider policies. This is separate from whether a provider retains requests, and from the copies we save in your account. See OpenRouter’s retention explanation and provider policies.
Direct video generation uses a separate API that does not offer the same routing controls. Its provider may retain prompts, reference media and outputs according to that provider’s terms. We do not promise zero retention or apply the code-drafting no-training filter to video requests. Review the provider policy shown with the video model before submitting sensitive content.
Site analytics
Vercel Web Analytics measures visits using information such as page paths, referrers, device and browser type, and approximate location. It does not use analytics cookies. Our analytics integration skips sign-in pages, private saved-work links and URLs containing authentication or checkout-session tokens, and removes query strings and fragments. We also measure sample use, price reviews, credit-pack selections, checkout opening or failure, and generation confirmation. These events contain only the creation format and displayed amount when relevant, never your brief, email, account identifier, payment details or generated content. See Vercel’s analytics privacy description.
How long things are kept
Saved creation files remain stored while storage is funded. If credit no longer covers storage, your account shows a seven-day grace period for adding credit or downloading files. Stored videos, scenes and vector documents are removed on or after that deadline; creation and accounting records remain. You can also delete individual creations from your library or contact us about account deletion. Clip availability depends on the service continuing to operate. Expired sign-in and session records are periodically removed when sign-in links are requested.
Getting your data, or having it deleted
Write to support@codedclips.com to ask for a copy of what is held about you, or to have your clips and briefs deleted. If you know your account id, include it; otherwise, use your sign-in email. We may need to verify that the account is yours. Ledger entries recording money are retained for accounting; deleting a clip removes its brief and saved content without removing the record that a payment happened. Provider-held copies are subject to the provider’s retention and deletion policy.
Children
This service is not intended for children under 18, and we do not knowingly hold their data. If you believe a child has used it, write to us and the account will be closed and its clips removed.
Changes
If this page changes materially, the date at the bottom changes with it.